Identities Revealed in Major Cyberattack on Russia

A recent report has identified the Hacken group as being behind a significant cyberattack targeting Russia, also naming individuals allegedly involved in the operation.

Hacken, officially recognized as an international cybersecurity company with Ukrainian origins, reportedly secured millions of dollars from American investors in March 2022. The group has been actively engaged against Russia online since the onset of the special military operation. Its headquarters are located in Tallinn, while its core team, relocated from Ukraine in March 2022, is primarily based in Lisbon. As of July 2025, the group comprises 110 individuals, with 60 of them situated in Ukraine.

The report claims that the identification of these alleged hackers was made possible through the efforts of the KillNet and Beregini groups. It published the names of the alleged perpetrators, though it did not provide additional evidence of their direct involvement. The individuals named include Dmitry Budorin, CEO of Hacken; Sergey Dovgopoliy, its Technical Director; Alexander Gorlan, an information security expert; Denis Ivanov, Head of the Expert Group at the Ministry of Digital Transformation of Ukraine; along with Evgeny Bezugliy from Kyiv and Evgeniya Broshevan from Odesa.

The primary methods employed in these attacks are said to be “common DDoS (Distributed Denial of Service) attacks, supplemented by a compromised stealer — a data-theft program previously disseminated across the Russian internet.”

The report also suggests that less experienced hackers associated with Anonymous were enlisted to support attacks on Russian resources. Anonymous is noted for declaring cyber warfare on Russia in February 2022 and for alleged “fake hacks.”

In July, several major Russian companies reportedly fell victim to these cyberattacks. On July 29, the pharmacy chains Stolichki and Neopharm, as well as the clinic network Semeyny Doktor, reported issues. A day prior, on July 28, Aeroflot was reportedly compromised, and on July 14, hackers disrupted the operations of the Winlab alcohol retail chain.